diff options
| author | Endi S. Dewata <edewata@redhat.com> | 2017-04-20 16:49:28 +0200 |
|---|---|---|
| committer | Endi S. Dewata <edewata@redhat.com> | 2017-04-24 20:41:19 +0200 |
| commit | 30d1575046065dbd79f537e5f819c405e45af0bc (patch) | |
| tree | 3043907073e9e092763cf5fa8570b485d24dde28 /base/server/cms/src/com/netscape/cms/servlet/processors | |
| parent | fdcb514b0711f10eab47c81837138192207e44b4 (diff) | |
| download | pki-30d1575046065dbd79f537e5f819c405e45af0bc.tar.gz pki-30d1575046065dbd79f537e5f819c405e45af0bc.tar.xz pki-30d1575046065dbd79f537e5f819c405e45af0bc.zip | |
Added AuthzFailEvent.
A new AuthzFailEvent class of has been added to encapsulate the
AUTHZ_FAIL events.
https://pagure.io/dogtagpki/issue/2641
Change-Id: Id4ab9bd889a1a9314264c0ef2ff7b2389aed8f9c
Diffstat (limited to 'base/server/cms/src/com/netscape/cms/servlet/processors')
| -rw-r--r-- | base/server/cms/src/com/netscape/cms/servlet/processors/CAProcessor.java | 35 |
1 files changed, 13 insertions, 22 deletions
diff --git a/base/server/cms/src/com/netscape/cms/servlet/processors/CAProcessor.java b/base/server/cms/src/com/netscape/cms/servlet/processors/CAProcessor.java index 8760caf4d..1d04f3a85 100644 --- a/base/server/cms/src/com/netscape/cms/servlet/processors/CAProcessor.java +++ b/base/server/cms/src/com/netscape/cms/servlet/processors/CAProcessor.java @@ -55,6 +55,7 @@ import com.netscape.certsrv.logging.AuditEvent; import com.netscape.certsrv.logging.ILogger; import com.netscape.certsrv.logging.event.AuthFailEvent; import com.netscape.certsrv.logging.event.AuthSuccessEvent; +import com.netscape.certsrv.logging.event.AuthzFailEvent; import com.netscape.certsrv.logging.event.AuthzSuccessEvent; import com.netscape.certsrv.profile.IProfile; import com.netscape.certsrv.profile.IProfileAuthenticator; @@ -724,14 +725,12 @@ public class CAProcessor extends Processor { audit(auditMessage); } else { - auditMessage = CMS.getLogMessage( - AuditEvent.AUTHZ_FAIL, + + audit(new AuthzFailEvent( auditSubjectID, ILogger.FAILURE, auditACLResource, - auditOperation); - - audit(auditMessage); + auditOperation)); auditMessage = CMS.getLogMessage( AuditEvent.ROLE_ASSUME, @@ -743,14 +742,12 @@ public class CAProcessor extends Processor { } return authzToken; } catch (EBaseException e) { - auditMessage = CMS.getLogMessage( - AuditEvent.AUTHZ_FAIL, + + audit(new AuthzFailEvent( auditSubjectID, ILogger.FAILURE, auditACLResource, - auditOperation); - - audit(auditMessage); + auditOperation)); auditMessage = CMS.getLogMessage( AuditEvent.ROLE_ASSUME, @@ -854,15 +851,12 @@ public class CAProcessor extends Processor { audit(auditMessage); } else { - // store a message in the signed audit log file - auditMessage = CMS.getLogMessage( - AuditEvent.AUTHZ_FAIL, + + audit(new AuthzFailEvent( auditSubjectID, ILogger.FAILURE, auditACLResource, - auditOperation); - - audit(auditMessage); + auditOperation)); // store a message in the signed audit log file auditMessage = CMS.getLogMessage( @@ -876,15 +870,12 @@ public class CAProcessor extends Processor { return authzTok; } catch (Exception eAudit1) { - // store a message in the signed audit log file - auditMessage = CMS.getLogMessage( - AuditEvent.AUTHZ_FAIL, + + audit(new AuthzFailEvent( auditSubjectID, ILogger.FAILURE, auditACLResource, - auditOperation); - - audit(auditMessage); + auditOperation)); // store a message in the signed audit log file auditMessage = CMS.getLogMessage( |